This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft File: sTFfExaKIog9oEuECAZgc7Hz8Nw.mft (raw, json) Hash identifier: vSKBVYdLF76DT3st3g8AdS8fMj/lR/dhOhgD9c3O4gc= Subject key identifier: D5:14:36:9E:8E:C9:19:FA:52:7A:25:A2:0C:5B:2E:4A:AF:1E:80:25 Authority key identifier: B1:31:5F:13:16:8A:22:88:3D:A0:4B:84:08:06:60:73:B1:F3:F0:DC Certificate issuer: /CN=b1315f13168a22883da04b8408066073b1f3f0dc Certificate serial: 019AF12E262291D3801C30A084FF99E40D24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTFfExaKIog9oEuECAZgc7Hz8Nw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:02:04 +0000 Manifest this update: Sat 06 Dec 2025 01:02:04 +0000 Manifest next update: Sun 07 Dec 2025 01:02:04 +0000 Files and hashes: 1: sTFfExaKIog9oEuECAZgc7Hz8Nw.crl (hash: oep2CDJ4YssZ6lSKyzngFLl/ccxa4MgXp/BqLoJBi+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft rsync://rpki.ripe.net/repository/DEFAULT/sTFfExaKIog9oEuECAZgc7Hz8Nw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:26:22:91:d3:80:1c:30:a0:84:ff:99:e4:0d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1315f13168a22883da04b8408066073b1f3f0dc Validity Not Before: Dec 6 01:02:04 2025 GMT Not After : Dec 7 01:02:04 2025 GMT Subject: CN=d514369e8ec919fa527a25a20c5b2e4aaf1e8025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8c:7a:e2:50:69:33:66:89:70:ae:df:8b:09: c6:db:e0:aa:c1:0e:46:da:95:18:9b:26:aa:1c:db: 77:8b:13:b0:2a:d5:46:ff:e6:f0:16:dc:00:71:ac: a3:a3:ae:09:8e:ee:93:42:99:5a:50:a2:7e:17:d0: 43:d6:6a:8c:ea:62:58:91:61:1e:0d:ed:bc:87:7d: 43:5a:56:a9:97:d1:28:eb:b0:58:36:1b:ef:13:f2: 45:e5:13:ad:d3:20:cb:26:46:ce:5b:b2:36:2a:05: 0b:65:f2:9b:63:53:aa:1f:1e:05:98:6f:69:a5:d2: 89:eb:e8:7c:5b:25:4f:f7:c6:82:3b:fe:cb:99:b8: 79:bf:e7:11:bc:fc:ad:65:6d:67:e1:30:bd:d1:9a: f0:47:d5:50:3b:ff:ee:30:4d:be:0d:9a:ce:ab:43: 5f:ff:14:b6:d0:39:d9:c0:9e:63:a1:f9:14:74:e2: 71:5e:5c:84:67:5a:19:c3:76:11:28:46:9b:09:32: 01:9f:4d:5f:62:23:f2:3c:45:4b:3c:d2:33:fd:d0: 98:f3:ef:b4:82:32:a0:88:cf:67:0b:99:26:2a:ee: ba:f1:92:ba:63:dc:fb:3a:b8:64:2e:51:ef:81:99: 57:cc:e2:ef:c5:47:5b:1a:0b:7c:c7:5f:8b:ba:7c: 5b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:14:36:9E:8E:C9:19:FA:52:7A:25:A2:0C:5B:2E:4A:AF:1E:80:25 X509v3 Authority Key Identifier: keyid:B1:31:5F:13:16:8A:22:88:3D:A0:4B:84:08:06:60:73:B1:F3:F0:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTFfExaKIog9oEuECAZgc7Hz8Nw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:1c:ac:57:66:ef:00:59:17:7d:c4:9f:43:00:01:ec:8a:ef: ba:f6:1a:6d:92:d6:11:c0:a4:23:f9:15:70:ba:c5:c4:b6:b9: 28:99:b1:94:e2:c8:03:87:94:5c:f7:e5:9a:28:50:de:36:40: 51:9e:ca:76:a4:a3:bf:13:2c:36:ea:35:53:f5:b7:a9:14:a5: f5:7d:d2:9c:f0:a5:ad:86:c1:51:97:d7:65:6f:26:97:8b:d1: ce:5d:52:de:27:f4:59:6a:e1:60:42:75:18:73:4c:8f:a8:96: 73:73:db:fe:0f:6d:77:c5:9f:4f:74:2b:5a:2f:00:91:5f:2c: b8:bb:d2:24:ee:de:72:09:d4:22:9a:1c:a7:d1:d3:f5:ac:f1: 42:00:ef:06:28:43:43:00:02:9c:67:d2:f4:00:c3:5f:5b:65: d3:0d:13:bd:da:06:a1:d5:d6:0f:e9:94:90:47:e1:29:53:a1: f4:06:99:54:c9:a0:fb:18:d4:3c:63:40:4c:14:79:49:6e:46: f3:6c:1d:22:f7:b6:fc:76:92:96:c5:a3:82:d6:40:2d:f0:6d: 06:74:b5:b5:67:4f:37:6e:0e:28:90:e2:2c:6b:e1:0e:b7:a5: 78:71:75:a7:48:b2:89:b0:9b:fd:8d:09:60:ad:6c:6e:b6:c1: 8b:37:e0:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiYikdOAHDCghP+Z5A0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMzE1ZjEzMTY4YTIyODgzZGEwNGI4NDA4MDY2MDczYjFm M2YwZGMwHhcNMjUxMjA2MDEwMjA0WhcNMjUxMjA3MDEwMjA0WjAzMTEwLwYDVQQD EyhkNTE0MzY5ZThlYzkxOWZhNTI3YTI1YTIwYzViMmU0YWFmMWU4MDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYx64lBpM2aJcK7fiwnG2+CqwQ5G 2pUYmyaqHNt3ixOwKtVG/+bwFtwAcayjo64Jju6TQplaUKJ+F9BD1mqM6mJYkWEe De28h31DWlapl9Eo67BYNhvvE/JF5ROt0yDLJkbOW7I2KgULZfKbY1OqHx4FmG9p pdKJ6+h8WyVP98aCO/7Lmbh5v+cRvPytZW1n4TC90ZrwR9VQO//uME2+DZrOq0Nf /xS20DnZwJ5jofkUdOJxXlyEZ1oZw3YRKEabCTIBn01fYiPyPEVLPNIz/dCY8++0 gjKgiM9nC5kmKu668ZK6Y9z7OrhkLlHvgZlXzOLvxUdbGgt8x1+LunxbwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUUNp6OyRn6UnologxbLkqvHoAlMB8GA1UdIwQY MBaAFLExXxMWiiKIPaBLhAgGYHOx8/DcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1RGZkV4YUtJb2c5b0V1RUNBWmdjN0h6OE53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9hMzJjMjktNDA4Ny00Zjg3LTg5ZDkt OWU0ZDEzNzZiYTMxLzEvc1RGZkV4YUtJb2c5b0V1RUNBWmdjN0h6OE53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9hMzJjMjktNDA4Ny00Zjg3LTg5ZDktOWU0ZDEzNzZiYTMx LzEvc1RGZkV4YUtJb2c5b0V1RUNBWmdjN0h6OE53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRysV2bv AFkXfcSfQwAB7IrvuvYabZLWEcCkI/kVcLrFxLa5KJmxlOLIA4eUXPflmihQ3jZA UZ7KdqSjvxMsNuo1U/W3qRSl9X3SnPClrYbBUZfXZW8ml4vRzl1S3if0WWrhYEJ1 GHNMj6iWc3Pb/g9td8WfT3QrWi8AkV8suLvSJO7ecgnUIpocp9HT9azxQgDvBihD QwACnGfS9ADDX1tl0w0TvdoGodXWD+mUkEfhKVOh9AaZVMmg+xjUPGNATBR5SW5G 82wdIve2/HaSlsWjgtZALfBtBnS1tWdPN24OKJDiLGvhDreleHF1p0iyibCb/Y0J YK1sbrbBizfgZg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:20 2025 by rpki-client